Liveness determination based on sensor signals

ABSTRACT

A device includes a memory and a processor. The memory is configured to store a threshold. The processor is configured to authenticate a user based on authentication data. The processor is also configured to, in response to determining that the user is authenticated, generate a correlation score indicating a correlation between a first signal received from a first sensor and a second signal received from a second sensor. The processor is also configured to determine liveness of the user based on a comparison of the correlation score and the threshold.

I. FIELD

The present disclosure is generally related to liveness determinationbased on sensor signals.

II. DESCRIPTION OF RELATED ART

Advances in technology have resulted in smaller and more powerfulcomputing devices. For example, there currently exist a variety ofportable personal computing devices, including wireless telephones suchas mobile and smart phones, tablets and laptop computers that are small,lightweight, and easily carried by users. These devices can communicatevoice and data packets over wireless networks. Further, many suchdevices incorporate additional functionality such as a digital stillcamera, a digital video camera, a digital recorder, and an audio fileplayer. Also, such devices can process executable instructions,including software applications, such as a web browser application, thatcan be used to access the Internet. As such, these devices can includesignificant computing capabilities.

Computing devices may be used to access sensitive information. Apassword may be used to provide secure access to a computing device. Forexample, a text password may be used to access the computing device or aparticular application of the computing device. Security of thecomputing device may be compromised if an unauthorized user has (orguesses) the text password. User verification may be performed based onan acoustic signal corresponding to a voice of a user. However, voicebiometric technologies are subject to spoofing attacks. For example, avoice recording of a user may be used to access a user account in anapplication that uses voice-based verification. Liveness tests may beused to detect whether audio is received from a live user or arecording. When a recording is detected, access to the user account maybe denied. When a live user is detected, access may be granted to theuser account in response to determining that the audio corresponds to avoice of an authorized user. A liveness test may include questions thatask a user to provide additional information. Liveness tests that arebased on challenge questions may make the verification process moreburdensome for the user, thereby adversely impacting the userexperience.

III. SUMMARY

In a particular aspect, a device includes a memory and a processor. Thememory is configured to store a threshold. The processor is configuredto authenticate a user based on authentication data. The processor isalso configured to, in response to determining that the user isauthenticated, generate a correlation score indicating a correlationbetween a first signal received from a first sensor and a second signalreceived from a second sensor. The processor is also configured todetermine liveness of the user based on a comparison of the correlationscore and the threshold.

In another particular aspect, a method of authentication includesdetermining, at a device, that a user is authenticated based onauthentication data. The method also includes, in response todetermining that the user is authenticated, generating a correlationscore indicating a correlation between a first signal received from afirst sensor and a second signal received from a second sensor. Themethod further includes determining, at the device, liveness of the userbased on a comparison of the correlation score and a threshold.

In another particular aspect, a computer-readable storage device storesinstructions that, when executed by a processor, cause the processor toperform operations including authenticating a user based onauthentication data. The operations also include, in response todetermining that the user is authenticated, generating a correlationscore indicating a correlation between a first signal received from afirst sensor and a second signal received from a second sensor. Theoperations further include determining liveness of the user based on acomparison of the correlation score and a threshold.

Other aspects, advantages, and features of the present disclosure willbecome apparent after review of the entire application, including thefollowing sections: Brief Description of the Drawings, DetailedDescription, and the Claims.

IV. BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram of a particular illustrative aspect of asystem configured to perform liveness determination based on sensorsignals;

FIG. 2 is a diagram illustrating another particular aspect of a systemconfigured to perform liveness determination based on sensor signals;

FIG. 3 is a diagram illustrating another particular aspect of a systemconfigured to perform liveness determination based on sensor signals;

FIG. 4 is a diagram illustrating another particular aspect of a systemconfigured to perform liveness determination based on sensor signals;

FIG. 5 is a diagram illustrating a particular method of livenessdetermination based on sensor signals;

FIG. 6 is a diagram illustrating another particular method of livenessdetermination based on sensor signals;

FIG. 7 is a diagram illustrating another particular method of livenessdetermination based on sensor signals;

FIG. 8 is a diagram illustrating another particular method of livenessdetermination based on sensor signals;

FIG. 9 is a diagram illustrating another particular method of livenessdetermination based on sensor signals;

FIG. 10 is a diagram illustrating another particular method of livenessdetermination based on sensor signals;

FIG. 11 is a diagram illustrating another particular method of livenessdetermination based on sensor signals;

FIG. 12 is a diagram illustrating another particular method of livenessdetermination based on sensor signals;

FIG. 13 is a diagram illustrating graphical user interfaces that may begenerated by the systems of FIGS. 1-4;

FIG. 14 is a flow chart illustrating another particular method ofliveness determination based on sensor signals; and

FIG. 15 is a block diagram of a device that is operable to supportvarious aspects of one or more methods, systems, apparatuses, andcomputer-readable media disclosed herein.

V. DETAILED DESCRIPTION

Systems and methods of sensor-based liveness determination aredisclosed. A device may include or may be coupled to a plurality ofsensors. For example, the device may be coupled to at least onevibration sensor, at least one acoustic sensor, or a combinationthereof. When a user speaks, vibrations may propagate through the bodyof the user. A first vibration sensor may generate a first vibrationsignal corresponding to the vibrations that propagate through the bodyof the user. A second vibration sensor may generate a second vibrationsignal corresponding to the vibrations that propagate through the bodyof the user. The first vibration signal may be distinct from the secondvibration signal because the first vibration sensor may be located at afirst part of the body and the second vibration sensor may be located ata second part of the body that is distinct from the first part of thebody. A first acoustic sensor may capture an acoustic signalcorresponding to the speech of the user. A correlation between the firstvibration signal and the second vibration signal, between the firstvibration signal and the acoustic signal, or both, may indicate a liveuser.

A spoofed acoustic signal based on an audio recording of the speech ofthe user may correspond to the original acoustic signal. A spoofedvibration signal may be generated by a vibration sensor based onvibration signals propagated through a body of an unauthorized userspeaking the words corresponding to the original speech of the user. Acorrelation between the spoofed vibration signal and the spoofedacoustic signal may differ from the correlation between the firstvibration signal and the original acoustic signal. Similarly, acorrelation between multiple spoofed vibration signals may differ from acorrelation between the first vibration signal and the second vibrationsignal. The correlation between the first vibration signal and thesecond vibration signal, between the first vibration signal and theacoustic signal, or both, may be relatively unique to the user.

During an enrollment stage, the device may perform livenessdetermination based on enrollment sensor signals received from theplurality of sensors. For example, the device may determine anenrollment correlation score based on the enrollment sensor signals. Thedevice may determine that the enrollment sensor signals correspond to alive user in response to determining that the enrollment correlationscore satisfies an enrollment correlation threshold. The device maystore enrollment data (e.g., a password, a finger print image) of anenrolling user in response to determining that the enrollment sensorsignals correspond to a live user.

During a testing stage, the device may perform liveness determinationbased on testing sensor signals received from the plurality of sensors.For example, the device may determine a correlation score based on thetesting sensor signals. The device may determine that the testing sensorsignals correspond to a live user (e.g., the enrolled user) in responseto determining that the correlation score satisfies a threshold. Thedevice may authenticate the user based on a comparison of the enrollmentdata and authentication data. The device may determine that the user isauthorized in response to determining that the user is authenticated andthat the testing sensor signals correspond to a live user (e.g., theenrolled user).

The device may perform passive liveness determination during general useof the device. For example, the sensor signals may be received by thedevice without the user being aware that a liveness determination isbeing performed. The sensor-based liveness determination, whensuccessful, may be performed without burdening the user with answeringchallenge questions to provide additional information to determineliveness. The sensor-based liveness determination may thus improve theuser experience.

Referring to FIG. 1, a system is shown and generally designated 100. Thesystem 100 includes a device 102. The device 102 may include a livenesschecker 130 (e.g., a processor or a hardware circuit), an authenticator120 (e.g., a processor or a hardware circuit), a memory 132, or acombination thereof. The device 102 may include or be coupled to aplurality of sensors (e.g., a vibration sensor, a microphone, or both).For example, the device 102 may be coupled to a first vibration sensor104, a second vibration sensor 106, a first microphone 108, or acombination thereof. To illustrate, the first vibration sensor 104, thesecond vibration sensor 106, or both, may be configured to generate asignal corresponding to vibrations through a cavity, a bone, or both, ofa human body.

The device 102 may include fewer or more components than illustrated inFIG. 1. For example, the device 102 may include one or more processors,one or more memory units, or both. The device 102 may include orcorrespond to a networked or a distributed computing system. In aparticular illustrative aspect, the device 102 may include or correspondto at least one of a mobile phone, a communication device, a computer, amusic player, a video player, an entertainment unit, a navigationdevice, a personal digital assistant (PDA), a decoder, or a set top box.

During a testing stage, the device 102 may receive a plurality ofsignals from a plurality of sensors. For example, the device 102 mayreceive a first vibration signal 124 from the first vibration sensor104, a second vibration signal 126 from the second vibration sensor 106,a first acoustic signal 128 from the first microphone 108, or acombination thereof. To illustrate, a user 110 may be speaking whilewearing earphones, bone conduction headphones, a wristband, glasses, anecklace, a back brace, etc. The first vibration sensor 104 may beincluded in a first device, such as the earphones, and the secondvibration sensor 106 may be included in another device, such as thewristband. The first vibration signal 124 may correspond to vibrationsthrough a first portion (e.g., an ear) of the body of the user 110 whilethe user 110 is speaking. The second vibration signal 126 may correspondto vibrations through a second portion (e.g., a wrist) of the body ofthe user 110 while the user 110 is speaking. The first acoustic signal128 may correspond to acoustic data collected by the first microphone108 while the user 110 is speaking. The device 102 may receive the firstacoustic signal 128 at approximately the same time as receiving thefirst vibration signal 124, the second vibration signal 126, or both.The first acoustic signal 128 may have a first timestamp that isapproximately the same as a first particular timestamp of the firstvibration signal 124, a second particular timestamp of the secondvibration signal 126, or both.

During the testing stage, the device 102 may perform authentication,liveness checking, or both, as described herein. The device 102 mayreceive authentication data 122 from the user 110. The authenticationdata 122 may include acoustic, non-acoustic data, or both. For example,the authentication data 122 may include at least one of an alphanumericpassword, a finger print, an iris scan, a facial image, or a verbalpassword. The device 102 may determine the authentication data 122 basedon input received via an input device (e.g., a keyboard, a finger printsensor, a camera, an iris scanner, and/or the first microphone 108) thatis coupled to or in communication with the device 102. For example, theauthentication data 122 may be based on the first acoustic signal 128.To illustrate, the user 110 may speak a verbal password. Theauthenticator 120 may generate the authentication data 122 by performingspeech recognition on the first acoustic signal 128. The authenticator120 may determine that authentication is successful in response todetermining that the authentication data 122 matches enrollment data118. The enrollment data 118 may be associated with an authorized (e.g.,enrolled) user, as described with reference to FIG. 2.

In a particular aspect, the authenticator 120 may generate a similarityscore based on the authentication data 122 and the enrollment data 118.The authenticator 120 may determine that the authentication data 122matches the enrollment data 118 in response to determining that thesimilarity score satisfies a similarity threshold. The enrollment data118 may be generated during an enrollment stage, as further describedwith reference to FIG. 2.

The liveness checker 130 may, in response to determining that theauthentication is successful, determine liveness of the user 110. Forexample, the liveness checker 130 may generate a correlation score 134based on the first acoustic signal 128, the first vibration signal 124,the second vibration signal 126, or a combination thereof. For example,the correlation score 134 may correspond to a vibration score, anacoustic-vibration correlation score, a vibration-vibration correlationscore, or a combination thereof. To illustrate, the correlation score134 (e.g., a vibration score) may indicate a measure (e.g., range) ofvibration corresponding to the first vibration signal 124, the secondvibration signal 126, or both. In a particular aspect, the correlationscore 134 (e.g., an acoustic-vibration correlation score) may indicate acorrelation between the first acoustic signal 128 and the firstvibration signal 124, between the first acoustic signal 128 and thesecond vibration signal 126, or both. In a particular aspect, thecorrelation score 134 (e.g., a vibration-vibration correlation score)may indicate a correlation between the first vibration signal 124 andthe second vibration signal 126.

In a particular aspect, the liveness checker 130 may extract firstacoustic features based on the first acoustic signal 128, firstvibration features based on the first vibration signal 124, secondvibration features based on the second vibration signal 126, or acombination thereof. The liveness checker 130 may determine thecorrelation score 134 based on the first vibration features, the secondvibration features, or both. For example, the correlation score 134 mayindicate a measure of vibration corresponding to the first vibrationfeatures, the second vibration features, or both. In a particularaspect, the liveness checker 130 may determine the correlation score 134based on the first acoustic features and the first vibration features.For example, the correlation score 134 may indicate a correlationbetween the first acoustic features and the first vibration features. Ina particular aspect, the liveness checker 130 may determine thecorrelation score 134 based on the first vibration features and thesecond vibration features. For example, the correlation score 134 mayindicate a correlation between the first vibration features and thesecond vibration features.

The liveness checker 130 may determine liveness of the user 110 based ona comparison of the correlation score 134 and a threshold 136. Thethreshold 136 may be indicative of a threshold correlation between afirst particular acoustic signal generated by the first microphone 108and a first particular vibration signal generated by the first vibrationsensor 104, between the first particular vibration signal and a secondparticular vibration signal generated by the second vibration sensor106, or both. In a particular aspect, the threshold 136 may beindicative of a threshold measure of vibration of a first particularvibration signal, a second particular vibration signal, or both. Thefirst particular vibration signal may correspond to first vibrationsthat propagate through a body (e.g., a bone, a cavity, or both) of alive user (e.g., an authorized user) when sounds corresponding to aparticular acoustic signal are generated by the user. The secondparticular vibration signal may correspond to second vibrations thatpropagate through a body (e.g., a bone, a cavity, or both) of the liveuser (e.g., an authorized user) when sounds corresponding to theparticular acoustic signal are generated by the user. The particularacoustic signal may be similar to the first acoustic signal 128. In aparticular aspect, the threshold 136 may be based on vibration signalscorresponding to a single user (e.g., an enrolled user, such as the user110), as further described with reference to FIG. 2. In an alternateaspect, the threshold 136 may be based on vibration signalscorresponding to multiple users. For example, the threshold 136 may bebased on a generic model of vibration signals. In a particular aspect,the liveness checker 130 may generate the threshold 136 based on ananti-spoofing model (e.g., an acoustic model, a vibration model, orboth), as further described with reference to FIG. 5.

The liveness checker 130 may determine that the first acoustic signal128 corresponds to a live user (e.g., as opposed to a recording) inresponse to determining that the correlation score 134 satisfies thethreshold 136. The liveness checker 130 may determine that the user 110is authorized in response to determining that the authentication data122 matches the enrollment data 118, that the first acoustic signal 128corresponds to a live user, or both. The liveness checker 130 may, inresponse to determining that the user 110 is authorized, enable accessto at least one of the device 102, an application of the device 102, aremote application, or protected data.

In a particular aspect, the liveness checker 130 may determine that thefirst acoustic signal 128 does not correspond to a live user in responseto determining that the correlation score 134 fails to satisfy thethreshold 136. The liveness checker 130 may, in response to determiningthat the first acoustic signal 128 does not correspond to a live user,display an error message, prompt the user 110 to provide additionalinformation, send an alert to another device, disable access to thedevice 102, disable access to an application of the device 102, or acombination thereof.

The system 100 thus enables passive liveness testing that may beperformed in the background during use of the device 102. For example,the liveness checker 130 may determine liveness of the user 110 based onthe first acoustic signal 128 that is received during general use of thedevice 102 without prompting the user 110 to provide the first acousticsignal 128. The first acoustic signal 128 may be received concurrentlywith the authentication data 122. In cases where the liveness checker130 determines that the first acoustic signal 128 corresponds to a liveuser, the user 110 may be unaware that the device 102 has performed aliveness determination.

Referring to FIG. 2, a system is shown and generally designated 200. Thesystem 200 may correspond to the system 100 of FIG. 1. For example, thesystem 100 may include one or more components of the system 200. Thesystem 200 includes an enroller 220 (e.g., a processor or a hardwarecircuit).

During an enrollment stage, the device 102 may receive a plurality ofsignals from a plurality of sensors. For example, the device 102 mayreceive a first vibration signal 224 from the first vibration sensor104, a second vibration signal 226 from the second vibration sensor 106,a first acoustic signal 228 from the first microphone 108, or acombination thereof. The first vibration signal 224 may correspond tovibrations through a first portion (e.g., an ear) of the body of a user210 while the user 210 is speaking. The second vibration signal 226 maycorrespond to vibrations through a second portion (e.g., a wrist) of thebody of the user 210 while the user 210 is speaking. The first acousticsignal 228 may correspond to acoustic data collected by the firstmicrophone 108 while the user 210 is speaking. The user 210 may be thesame as the user 110 of FIG. 1.

The liveness checker 130 may generate an enrollment correlation score234 based on the first acoustic signal 228, the first vibration signal224, the second vibration signal 226, or a combination thereof. Forexample, the enrollment correlation score 234 (e.g., vibrationcorrelation score) may indicate a measure of vibration in a vibrationsignal (e.g., the first vibration signal 224, the second vibrationsignal 226, or both). As another example, the enrollment correlationscore 234 (e.g., acoustic-vibration correlation score) may indicate acorrelation between the first acoustic signal 228 and a vibration signal(e.g., the first vibration signal 224, the second vibration signal 226,or both). As a further example, the enrollment correlation score 234(e.g., a vibration-vibration correlation score) may indicate acorrelation between the first vibration signal 124 and the secondvibration signal 126. The enrollment correlation score 234 may beassociated with the user 210.

In a particular aspect, the liveness checker 130 may extract firstacoustic features based on the first acoustic signal 228, firstvibration features based on the first vibration signal 224, secondvibration features based on the second vibration signal 226, or acombination thereof. The liveness checker 130 may determine theenrollment correlation score 234 based on the first vibration features,the second vibration features, or both. For example, the enrollmentcorrelation score 234 may indicate a measure of vibration correspondingto the first vibration signal 224, the second vibration signal 226, orboth. In a particular aspect, the liveness checker 130 may determine theenrollment correlation score 234 based on the first acoustic featuresand the first vibration features. For example, the enrollmentcorrelation score 234 may indicate a correlation between the firstacoustic features and the first vibration features. In a particularaspect, the liveness checker 130 may determine the enrollmentcorrelation score 234 based on the first vibration features and thesecond vibration features. For example, the enrollment correlation score234 may indicate a correlation between the first vibration features andthe second vibration features. In a particular aspect, the livenesschecker 130 may generate (or update) an anti-spoofing model based onenrollment features (e.g., the first acoustic features, the firstvibration features, the second vibration features, or a combinationthereof). The liveness checker 130 may determine the threshold 136 basedon the anti-spoofing model, as further described with reference to FIG.5.

The liveness checker 130 may determine liveness of the user 210 based onthe enrollment correlation score 234 and an enrollment threshold 236.The enrollment threshold 236 may indicate a threshold correlationbetween a first particular acoustic signal generated by the firstmicrophone 108 and a first particular vibration signal generated by thefirst vibration sensor 104, between the first particular vibrationsignal and a second particular vibration signal generated by the secondvibration sensor 106, or both. In a particular aspect, the enrollmentthreshold 236 may indicate a threshold measure of vibration of a firstparticular vibration signal, a second particular vibration signal, orboth. The first particular vibration signal may correspond to firstvibrations that propagate through a body (e.g., a bone, a cavity, orboth) of a particular user (e.g., a generic user) when soundscorresponding to a particular acoustic signal are generated by the user.The second particular vibration signal may correspond to secondvibrations that propagate through a body (e.g., a bone, a cavity, orboth) of a particular user (e.g., a generic user) when soundscorresponding to the particular acoustic signal are generated by theuser. The particular acoustic signal may be similar to the firstacoustic signal 228.

In a particular aspect, the liveness checker 130 may generate theenrollment threshold 236 based on an anti-spoofing model (e.g., anacoustic model, a vibration model, or both). The anti-spoofing model maycorrespond to a generic user. For example, the anti-spoofing model maybe based on vibration signals, acoustic signals, or both, correspondingto multiple users. To illustrate, the anti-spoofing model may be basedon first acoustic features of one or more first acoustic signals, firstvibration features of one or more first vibration signals, secondvibration features of one or more second vibration signals, or acombination thereof. The first vibration sensor 104 may be of a firsttype (e.g., a sensor in earphones). The first vibration signals may bereceived from a vibration sensor of a second type that is the same as(or similar to) the first type. The second vibration sensor 106 may beof a first particular type (e.g., a sensor in a wristband). The secondvibration signals may be received from a vibration sensor of a secondparticular type that is the same as (or similar to) the first particulartype.

The anti-spoofing model may indicate a correlation score between thefirst acoustic features and the first vibration features, between thefirst vibration features and the second vibration features, or both. Theanti-spoofing model may indicate a correlation score associated with ameasure of vibration corresponding to the first vibration features, thesecond vibration features, or both. The first vibration features, thesecond vibration features, or both, may correspond to the first acousticfeatures. For example, the first acoustic signals may be associated witha first timestamp that is approximately the same as a first particulartimestamp associated with the first vibration features and a secondparticular timestamp associated with the second vibration features.

The liveness checker 130 may determine the enrollment threshold 236based on the anti-spoofing model and the first acoustic signal 228. Forexample, the liveness checker 130 may determine acoustic features basedon the first acoustic signal 228 and may determine the enrollmentthreshold 236 corresponding to the acoustic features based on theanti-spoofing model.

The liveness checker 130 may determine that the first acoustic signal228 corresponds to a live user in response to determining that theenrollment correlation score 234 satisfies (e.g., is greater than orequal to) the enrollment threshold 236. The enroller 220 may, inresponse to determining that the first acoustic signal 228 correspondsto a live user, store the enrollment data 118 in the memory 132. Forexample, during the enrollment stage, the enroller 220 may prompt theuser 210 to provide the enrollment data 118 and the liveness checker 130may concurrently perform the liveness determination. The enrollment data118 may include at least one of an alphanumeric password, a fingerprint, an iris scan, a facial image, or a verbal password. The enroller220 may receive the enrollment data 118 from the user 210. For example,the enroller 220 may determine the enrollment data 118 based on inputreceived via an input device (e.g., a keyboard, a finger print sensor, acamera, an iris scanner, and/or the first microphone 108) that iscoupled to or in communication with the device 102. For example, theenrollment data 118 may be based on the first acoustic signal 228. Toillustrate, the user 210 may speak a verbal password. The enroller 220may generate the enrollment data 118 by performing speech recognition onthe first acoustic signal 228.

The enroller 220 may, in response to determining that the first acousticsignal 228 corresponds to a live user, store the enrollment data 118 inthe memory 132. The enrollment data 118 may be associated with anauthorized user (e.g., the user 210). For example, the enrollment data118 may be associated with an identifier (e.g., a username)corresponding to the user 210.

In a particular aspect, the threshold 136 used during the testing stagemay be based on the enrollment correlation score 234 determined duringthe enrollment stage. For example, the liveness checker 130 maydetermine the threshold 136 based on the enrollment correlation score234 (e.g., the threshold 136=the enrollment correlation score 234+atolerance value). To illustrate, the liveness checker 130 may store asum of the enrollment correlation score 234 and a tolerance value in thememory 132 as the threshold 136.

In a particular aspect, the liveness checker 130 may determine that thefirst acoustic signal 228 does not correspond to a live user in responseto determining that the enrollment correlation score 234 fails tosatisfy (e.g., is less than) the enrollment threshold 236. The enroller220 may, in response to determining that the first acoustic signal 228does not correspond to a live user, display an error message, prompt theuser 210 to provide additional information, send an alert to anotherdevice, disable access to the device 102, disable access to anapplication of the device 102, or a combination thereof.

The system 200 thus enables determining liveness of the user 210 duringan enrollment stage. The liveness determination may be performed in thebackground concurrently with receiving the enrollment data 118 from theuser 210.

Referring to FIG. 3, a system is shown and generally designated 300. Thesystem 300 may correspond to the system 100 of FIG. 1, the system 200 ofFIG. 2, or both. For example, the system 100 may include one or morecomponents of the system 300. As another example, the system 200 mayinclude one or more components of the system 300.

The device 102 may include an acoustic distortion measurer 340 (e.g., aprocessor or a circuit). The acoustic distortion measurer 340 may beconfigured to measure acoustic distortion in an acoustic signal. Thedevice 102 may be coupled to a second microphone 312.

During operation, the device 102 may receive a first vibration signal324 (e.g., the first vibration signal 124 of FIG. 1 or the firstvibration signal 224 of FIG. 2) from the first vibration sensor 104, asecond vibration signal 326 (e.g., the second vibration signal 126 ofFIG. 1 or the second vibration signal 226 of FIG. 2) from the secondvibration sensor 106, a first acoustic signal 328 (e.g., the firstacoustic signal 128 of FIG. 1 or the first acoustic signal 228 of FIG.2) from the first microphone 108, a second acoustic signal 330 from thesecond microphone 312, or a combination thereof. The second acousticsignal 330 may correspond to acoustic data collected by the secondmicrophone 312 while a user 310 (e.g., the user 110 of FIG. 1 or theuser 210 of FIG. 2) is speaking.

The acoustic distortion measurer 340 may generate acoustic distortiondata 342 based on the first acoustic signal 328. The acoustic distortiondata 342 may indicate a level of acoustic distortion in the firstacoustic signal 328. In a particular aspect, the acoustic distortionmeasurer 340 may extract acoustic features from the first acousticsignal 328. The acoustic distortion measurer 340 may determine aclassification score based on the acoustic features and an acousticmodel. The acoustic distortion data 342 may include the classificationscore. First acoustic distortion of a first acoustic signal receivedfrom a recording may be higher than a second acoustic distortion of asecond acoustic signal received from a live user. The liveness checker130 may perform a first liveness determination of the user 310 based onthe acoustic distortion data 342 and an acoustic distortion threshold338. For example, the liveness checker 130 may determine that the firstliveness determination is successful in response to determining that theacoustic distortion data 342 satisfies (e.g., is less than) the acousticdistortion threshold 338. Alternatively, the liveness checker 130 maydetermine that the first acoustic signal 328 does not correspond to alive user in response to determining that the acoustic distortion data342 fails to satisfy (e.g., is greater than or equal to) the acousticdistortion threshold 338. The liveness checker 130 may, in response todetermining that the first acoustic signal 328 does not correspond to alive user, display an error message, prompt the user 310 to provideadditional information, send an alert to another device, disable accessto the device 102, disable access to an application of the device 102,or a combination thereof.

In a particular implementation, the liveness checker 130 may, inresponse to determining that the first liveness determination issuccessful, determine that the first acoustic signal 328 corresponds toa live user. In an alternative implementation, the liveness checker 130may, in response to determining that the first liveness determination issuccessful, perform a second liveness determination, generate adirection of arrival (DOA) correlation score 334, as described herein,generate the correlation score 134 of FIG. 1, or generate the enrollmentcorrelation score 234 of FIG. 2.

The liveness checker 130 may generate DOA data 344 based on a pluralityof acoustic signals (e.g., the first acoustic signal 328 and the secondacoustic signal 330) received from a plurality of microphones (e.g., thefirst microphone 108 and the second microphone 312). The DOA data 344may indicate DOA corresponding to the first acoustic signal 328 and thesecond acoustic signal 330. For example, when the first acoustic signal328 and the second acoustic signal 330 are generated by a live user(e.g., the user 310), the DOA may vary with a movement of the lips ofthe user 310. When the first acoustic signal 328 and the second acousticsignal 330 are generated by a recording, the DOA may vary with amovement of a playback device. For example, when the playback device isstationary, the DOA may vary little or not at all.

The liveness checker 130 may determine variations in DOA 346 based onthe DOA data 344. The variations in DOA 346 may indicate a measure (e.g.an average) of absolute changes in the DOA (as indicated by the DOA data344) over a time period. For example, the DOA data 344 may indicate thatthe DOA corresponds to a first DOA value at a time t1, to a second DOAvalue at a time t2, and to a third DOA value at a time t3. Thevariations in DOA 346 may be based on absolute differences between theDOA values (e.g., the variations in DOA 346=|first DOA value−second DOAvalue|+|second DOA value−third DOA value|).

The liveness checker 130 may, in response to determining that thevariations in DOA 346 fail to satisfy a variation threshold 348,determine that the first acoustic signal 328 does not correspond to alive user. The variation threshold 348 may be indicative of a thresholdvariation when sounds corresponding to the first acoustic signal 328 arereceived from a live user. The liveness checker 130 may, in response todetermining that the first acoustic signal 328 does not correspond to alive user, prompt the user 310 to provide additional information, sendan alert to another device, disable access to the device 102, disableaccess to an application of the device 102, or a combination thereof.

The liveness checker 130 may, in response to determining that thevariations in DOA 346 satisfy the variation threshold 348, determinethat the second liveness determination is successful. The livenesschecker 130 may, in response to determining that the second livenessdetermination is successful, generate the DOA correlation score 334, asdescribed herein, the correlation score 134 of FIG. 1, or the enrollmentcorrelation score 234 of FIG. 2.

The liveness checker 130 may generate the DOA correlation score 334indicating a particular correlation between the DOA indicated by the DOAdata 344 and the first acoustic signal 328. The liveness checker 130 maydetermine liveness of the user 310 based on a comparison of the DOAcorrelation score 334 and a DOA threshold 336. The DOA threshold 336 mayindicative of a threshold correlation between the DOA and the firstacoustic signal 328 when sounds corresponding to the first acousticsignal 328 are generated by a live user. For example, the livenesschecker 130 may determine that the first acoustic signal 328 correspondsto a live user in response to determining that the DOA correlation score334 satisfies the DOA threshold 336.

One or more of the acoustic distortion threshold 338, the variationthreshold 348, or the DOA threshold 336 may include default values. Oneor more of the acoustic distortion threshold 338, the variationthreshold 348, or the DOA threshold 336 may include values based ongeneric sample data associated with a plurality of users.

In a particular implementation, during the testing stage, one or more ofthe acoustic distortion threshold 338, the variation threshold 348, orthe DOA threshold 336 may include values based on data associated withthe user 210 of FIG. 2. For example, the acoustic distortion threshold338 used during the testing stage may be based on the acousticdistortion data 342 determined during the enrollment stage (e.g., theacoustic distortion threshold 338 (testing stage)=the acousticdistortion data 342 (enrollment stage)+a tolerance value). As anotherexample, the variation threshold 348 used during the testing stage maybe based on the variations in DOA 346 determined during the enrollmentstage (e.g., the variation threshold 348 (testing stage)=the variationsin DOA 346 (enrollment stage)+a tolerance value). As a further example,the DOA threshold 336 used during the testing stage may be based on theDOA correlation score 334 determined during the enrollment stage (e.g.,the DOA threshold 336 (testing stage)=the DOA correlation score 334(enrollment stage)+a tolerance value).

In a particular aspect, the DOA correlation score 334 may correspond tothe correlation score 134 of FIG. 1 and the DOA threshold 336 maycorrespond to the threshold 136 of FIG. 1. In a particular aspect, theDOA correlation score 334 may correspond to the enrollment correlationscore 234 of FIG. 2 and the DOA threshold 336 may correspond to theenrollment threshold 236 of FIG. 2.

Referring to FIG. 4, a system is disclosed and generally designated 400.The system 400 may correspond to the system 100 of FIG. 1, the system200 of FIG. 2, the system 300 of FIG. 1, or a combination thereof. Thedevice 102 may include a synthetic signal generator 440. The device 102may include one or more speakers 404. The synthetic signal generator 440(e.g., a processor or a circuit) may be configured to generate asynthetic speech signal.

During operation, the synthetic signal generator 440 may perform speechsynthesis to generate a synthetic speech signal 424 corresponding to oneor more first words 444. The first words 444 may include one or morefirst prosody features 442. The first prosody features 442 may includeat least one of loudness, duration, pause, or pitch. The livenesschecker 130 may provide the synthetic speech signal 424 to the speakers404. The liveness checker 130 may prompt the user 310 to repeat thefirst words 444. For example, the liveness checker 130 may provide amessage to a display indicating that the user 310 is to reproduce soundscorresponding to the synthetic speech signal 424. In a particularaspect, the message may include text corresponding to the first words444 and may indicate the first prosody features 442.

The device 102 may receive a first acoustic signal 428 via the firstmicrophone 108. The first acoustic signal 428 may correspond to speechof the user 310. The liveness checker 130 may perform speech recognitionto determine that the first acoustic signal 428 corresponds to one ormore second words 446 and that the first acoustic signal 428 includesone or more second prosody features 434.

The liveness checker 130 may, in response to determining that adifference between the first acoustic signal 428 and the syntheticspeech signal 424 fails to satisfy (e.g., is greater than) a differencethreshold, provide the synthetic speech signal 424 to the speakers 404again, provide another synthetic speech signal to the speakers 404,display an error message, determine that the first acoustic signal 428does not correspond to a live user, or a combination thereof. In aparticular implementation, the difference between the first acousticsignal 428 and the synthetic speech signal 424 may correspond to adifference between the first words 444 and the second words 446, adifference between the first prosody features 442 and the second prosodyfeatures 434, or both.

Alternatively, the liveness checker 130 may, in response to determiningthat the difference between the first acoustic signal 428 and thesynthetic speech signal 424 satisfies (e.g., is less than or equal to)the difference threshold, generate the correlation score 134 of FIG. 1,the enrollment correlation score 234 of FIG. 2, the DOA data 344, theacoustic distortion data 342, the variations in DOA 346, the DOAcorrelation score 334 of FIG. 3, or a combination thereof. In aparticular aspect, the liveness checker 130 may determine that the firstacoustic signal 428 corresponds to a live user in response todetermining that the difference between the first acoustic signal 428and the synthetic speech signal 424 satisfies (e.g., is less than orequal to) the difference threshold.

In a particular implementation, the liveness checker 130 may, inresponse to determining that the first words 444 are the same as (orsimilar to) the second words 446 and that the first prosody features 442are the same as (or similar to) the second prosody features 434,generate the correlation score 134 of FIG. 1, the enrollment correlationscore 234 of FIG. 2, the DOA data 344, the acoustic distortion data 342,the variations in DOA 346, the DOA correlation score 334 of FIG. 3, or acombination thereof. In a particular aspect, the liveness checker 130may determine that the first acoustic signal 428 corresponds to a liveuser in response to determining that the first words 444 are the same as(or similar to) the second words 446 and that the first prosody features442 are the same as (or similar to) the second prosody features 434. Thesystem 400 may thus enable determining liveness of the user 310 based onprosody features that may difficult to spoof in real-time.

Referring to FIG. 5, a method is shown and generally designated 500. Themethod 500 may be performed by at least one of the liveness checker 130,the authenticator 120, the device 102, the system 100 of FIG. 1, theenroller 220, or the system 200 of FIG. 2.

The method 500 includes performing enrollment, at 502. For example, theenroller 220 of FIG. 2 may, during an enrollment stage, receive (oraccess) enrollment acoustic data 508, enrollment vibration data 510, orboth. The enrollment acoustic data 508, the enrollment vibration data510, or both, may be associated with the user 210 of FIG. 2. Forexample, the enrollment acoustic data 508 may include the first acousticsignal 228 of FIG. 2. The enrollment vibration data 510 may include thefirst vibration signal 224, the second vibration signal 226 of FIG. 2,or both. The enroller 220 may generate acoustic features 514 based onthe enrollment acoustic data 508. The enroller 220 may generatevibration features 516 based on the enrollment vibration data 510.

The enroller 220 may generate (or update) an anti-spoofing model basedon the acoustic features 514, the vibration features 516, or both. Theanti-spoofing model may include an acoustic model, a vibration model, orboth. In a particular aspect, the liveness checker 130 may generate theenrollment correlation score 234, as described with reference to FIG. 2,based on the acoustic features 514, the vibration features 516, or both.The enroller 220 may generate (or update) the anti-spoofing model inresponse to determining that the enrollment correlation score 234satisfies (e.g., is greater than) the enrollment threshold 236.

In a particular aspect, the enroller 220 may receive the enrollment data118 from the user 210, as described with reference to FIG. 2. Theenrollment data 118 may include non-acoustic data. For example, theenrollment data 118 may include at least one of an alphanumericpassword, a finger print, an iris scan, or a facial image. The enroller220 may store the enrollment data 118 in the memory 132 in response todetermining that the enrollment correlation score 234 satisfies (e.g.,is greater than) the enrollment threshold 236. The enrollment data 118,the acoustic features 514, the vibration features 516, or a combinationthereof, may be associated with an authorized user (e.g., the user 210).For example, the enrollment data 118, the acoustic features 514, thevibration features 516, or a combination thereof, may be associated with(e.g., reference) an identifier (e.g., a user name) of the user 210.

The method 500 also includes performing verification, at 504. Forexample, the authenticator 120 of FIG. 1 may, during a testing stage,receive (or access) testing acoustic data 512, testing vibration data530, or both. The testing acoustic data 512, the testing vibration data530, or both, may be associated with the user 110 of FIG. 1. Forexample, the testing acoustic data 512 may include the first acousticsignal 128 of FIG. 1. The testing vibration data 530 may include thefirst vibration signal 124, the second vibration signal 126 of FIG. 1,or both. The liveness checker 130 may generate acoustic features 518based on the testing acoustic data 512. The liveness checker 130 maygenerate vibration features 520 based on the testing vibration data 530.

In a particular aspect, the authenticator 120 of FIG. 1 may receive theauthentication data 122, as described with reference to FIG. 1. Theauthenticator 120 may determine whether the user 110 is authenticatedbased on a comparison of the authentication data 122 and the enrollmentdata 118, as described with reference to FIG. 1. For example, theauthenticator 120 may determine that the user 110 is authenticated inresponse to determining that the authentication data 122 (e.g., apassword) matches the enrollment data 118 (e.g., a password associatedwith an authorized user). The liveness checker 130 may generate theacoustic features 518, the vibration features 520, or both, in responseto determining that the user 110 is authenticated.

The method 500 further includes anti-spoofing, at 506. For example, theliveness checker 130 of FIG. 1 may generate the correlation score 134,as described with reference to FIG. 1, based on the acoustic features518, the vibration features 520, or both. The liveness checker 130 maygenerate the threshold 136 based on the anti-spoofing model. Forexample, the liveness checker 130 may generate the threshold 136 byapplying the acoustic features 518 to the anti-spoofing model. Thethreshold 136 may indicate a vibration measure, an acoustic-vibrationcorrelation, a vibration-vibration correlation, or a combinationthereof, corresponding to the user 210 when the acoustic features 518are generated by the user 210.

The liveness checker 130 may generate a result 522 indicating whetherthe correlation score 134 satisfies the threshold 136. For example, afirst value (e.g., a non-spoof value) of the result 522 may indicatethat the correlation score 134 satisfies (e.g., is greater than or equalto) the threshold 136. A second value (e.g., a spoof value) of theresult 522 may indicate that the correlation score 134 fails to satisfy(e.g., is less than) the threshold 136.

The liveness checker 130 may store the result 522 in the memory 132, mayprovide the result 522 to a display, or both. In a particular aspect,the liveness checker 130 may, in response to determining that the result522 has the second value (e.g., a spoof value), determine that the user(e.g., the user 110) is not authorized, prompt the user 110 to provideadditional information, disable access to the device 102 of FIG. 1,disable access to an application of the device 102, alert anotherdevice, or a combination thereof.

The method 500 may thus enable passive liveness testing that may beperformed in the background during use of the device 102. For example,the liveness checker 130 may, during an enrollment stage, determineliveness of the user 210 based on the enrollment acoustic data 508, theenrollment vibration data 510, or both, received during general use ofthe device 102 without prompting the user 210 to provide the enrollmentacoustic data 508, the enrollment vibration data 510, or both. Theenrollment acoustic data 508, the enrollment vibration data 510, orboth, may be received concurrently with the enrollment data 118. Asanother example, the liveness checker 130 may, during a testing stage,determine liveness of the user 110 based on the testing acoustic data512, the testing vibration data 530, or both, received during generaluse of the device 102 without prompting the user 110 to provide thetesting acoustic data 512, the testing vibration data 530, or both. Thetesting acoustic data 512, the testing vibration data 530, or both, maybe received concurrently with the authentication data 122.

Referring to FIG. 6, a method is shown and generally designated 600. Themethod 600 may be performed by at least one of the liveness checker 130,the authenticator 120, the device 102, the system 100 of FIG. 1, theenroller 220, the system 200 of FIG. 2, the acoustic distortion measurer340, or the system 300 of FIG. 3.

The method 600 includes performing anti-spoofing, at 616. Theanti-spoofing, at 616, may correspond to the verification, at 504 ofFIG. 5, the anti-spoofing, at 506 of FIG. 5, or both.

The method 600 includes receiving, at 602, the testing acoustic data512, the testing vibration data 530, or both. For example, the device102 of FIG. 1, may receive the testing acoustic data 512, the testingvibration data 530, or both, as described with reference to FIG. 5. Thetesting acoustic data 512, the testing vibration data 530, or both, maybe received concurrently with the user 110 speaking a keyword. Thekeyword may correspond to the authentication data 122 of FIG. 1.

The method 600 also includes speaker identification (ID) verification,at 604. For example, the authenticator 120 of FIG. 1 may determinewhether the user 110 is authenticated based on a comparison of theenrollment data 118 and the authentication data 122, as described withreference to FIG. 1. The authenticator 120 may generate an accept value620 in response to determining that the user 110 is authenticated.Alternatively, the authenticator 120 may generate a reject value 621 inresponse to determining that the user 110 is not authenticated. Themethod 600 may, in response to determining that the user 110 is notauthenticated, at 604, proceed to 612.

The method 600 further includes, in response to determining that theuser 110 is authenticated, at 604, performing anti-spoofing based onacoustics, at 606. For example, the liveness checker 130 of FIG. 1 mayperform a first liveness determination based on the acoustic distortiondata 342 and the acoustic distortion threshold 338 of FIG. 3, perform asecond liveness determination based on the variations in DOA 346 and thevariation threshold 348 of FIG. 3, perform a third livenessdetermination based on the DOA correlation score 334 and the DOAthreshold 336 of FIG. 3, or a combination thereof, as described withreference to FIG. 3.

The acoustic distortion measurer 340 may generate the acousticdistortion data 342 based on the testing acoustic data 512. For example,the testing acoustic data 512 may include the first acoustic signal 128.The acoustic distortion data 342 may indicate a level of acousticdistortion in the first acoustic signal 128. The acoustic distortionmeasurer 340 may determine the acoustic distortion threshold 338 basedon the enrollment acoustic data 508. The acoustic distortion threshold338 may correspond to a level of acoustic distortion in the firstacoustic signal 228. The enrollment acoustic data 508 may include thefirst acoustic signal 228.

The liveness checker 130 may generate the DOA data 344 of FIG. 3 basedon a plurality of acoustic signals (e.g., the first acoustic signal 128and a second acoustic signal), as described with reference to FIG. 3.The liveness checker 130 may determine the variations in DOA 346 of FIG.3 based on the DOA data 344, as described with reference to FIG. 3. Theliveness checker 130 may determine the variation threshold 348 based onthe enrollment acoustic data 508. For example, the variation threshold348 may correspond to variations in DOA associated with the enrollmentacoustic data 508.

The liveness checker 130 may generate the DOA correlation score 334indicating a correlation between the DOA indicated by the DOA data 344and the first acoustic signal 128, as described with reference to FIG.3. The liveness checker 130 may determine the DOA threshold 336 based onthe enrollment acoustic data 508. For example, the DOA threshold 336 maycorrespond to a correlation between the DOA associated with theenrollment acoustic data 508 and the first acoustic signal 228.

The liveness checker 130 may perform a model-based determination basedon the enrollment acoustic data 508, the testing acoustic data 512, orboth, as further described with reference to FIG. 7. The livenesschecker 130 may perform one or more determinations of the first livenessdetermination, the second liveness determination, the third livenessdetermination, or the model-based determination. The liveness checker130 may, in response to determining that at least one of the one or moredeterminations is unsuccessful, generate a spoof value 623. The method600 may proceed to 612. The liveness checker 130 may, in response todetermining that all of the one or more determinations are successful,generate a non-spoof value 622.

The method 600 also includes, in response to determining that all of theone or more determinations are successful, at 606, performinganti-spoofing, at 608. For example, the liveness checker 130 maydetermine the correlation score 134 based on the testing acoustic data512, the testing vibration data 530, or both, as described withreference to FIG. 5. The liveness checker 130 may determine thethreshold 136 based on the enrollment acoustic data 508, the enrollmentvibration data 510, or both, as described with reference to FIG. 5.

The liveness checker 130 may determine that the user 110 is authorizedbased on a comparison of the correlation score 134 and the threshold136, as described with reference to FIG. 1. The liveness checker 130 maygenerate a spoof value 625 in response to determining that the user 110is not authorized. The method 600 may proceed to 612. The livenesschecker 130 may, in response to determining that the user 110 isauthorized, at 608, generate a non-spoof value 624.

The method 600 further includes, in response to determining that theuser 110 is authorized, at 608, performing user acceptance, at 610. Forexample, the liveness checker 130 may, in response to determining thatthe user 110 is authorized, enable access to the device 102, anapplication of the device 102, a remote application, protected data, ora combination thereof.

The method 600 also includes performing user rejection, at 612. Forexample, the liveness checker 130 may disable access to the device 102,an application of the device 102, a remote application, protected data,or a combination thereof. In a particular aspect, the liveness checkermay prompt the user 110 to provide additional information, alert anotherdevice, or both.

The method 600 may thus enable passive liveness testing that may beperformed in the background during use of the device 102. For example,the liveness checker 130 may determine liveness of the user 110 based onthe testing acoustic data 512 during general use of the device 102without prompting the user 110 to provide the testing acoustic data 512.

Referring to FIG. 7, a method is shown and generally designated 700. Themethod 700 may be performed by at least one of the liveness checker 130,the authenticator 120, the device 102, the system 100 of FIG. 1, theenroller 220, the system 200 of FIG. 2, the acoustic distortion measurer340, or the system 300 of FIG. 3. The method 700 includes performinganti-spoofing, at 606.

The method 700 includes feature extraction, at 702. For example, theliveness checker 130 of FIG. 1 may determine features 712 based on theenrollment acoustic data 508, the testing acoustic data 512, or both. Toillustrate, the liveness checker 130 may determine enrollment acousticfeatures of the enrollment acoustic data 508, testing acoustic featuresof the testing acoustic data 512, or both. The features 712 may includethe enrollment acoustic features, the testing acoustic features, orboth.

The method 700 also includes classification, at 704. For example, theliveness checker 130 may generate a score 716 based on the features 712and an acoustic model 714. To illustrate, the enroller 220 may update(or generate) the acoustic model 714 based on the enrollment acousticfeatures. The liveness checker 130 may generate the score 716 based onthe testing acoustic features and the acoustic model 714. For example,the score 716 may indicate a likelihood (e.g., a probability) that thetesting acoustic features correspond to acoustic features (e.g., theenrollment acoustic features) modelled by the acoustic model 714. Toillustrate, the score 716 may indicate a likelihood (e.g., aprobability) that the first acoustic signal 128 corresponds to the voiceof the same person as the first acoustic signal 228.

The method 700 further includes making a decision, at 706. For example,the liveness checker 130 may, in response to determining that the score716 satisfies (e.g., is greater than) a threshold, generate thenon-spoof value 622. The method 700 may proceed to 608. As anotherexample, the liveness checker 130 may, in response to determining thatthe score 716 fails to satisfy (e.g., is less than or equal to) thethreshold, generate the spoof value 623. The method 700 may proceed to612.

The method 700 may thus enable the liveness checker 130 to perform apreliminary acoustic-based anti-spoofing determination. The livenesschecker 130 may perform a vibration-based anti-spoofing determination incases where the acoustic-based anti-spoofing determination issuccessful.

Referring to FIG. 8, a method is disclosed and generally designated 800.The method 800 may be performed by at least one of the liveness checker130, the authenticator 120, the device 102, the system 100 of FIG. 1,the enroller 220, the system 200 of FIG. 2, the acoustic distortionmeasurer 340, or the system 300 of FIG. 3. The method 800 includesperforming anti-spoofing, at 608.

The method 800 includes feature extraction, at 802. For example, theliveness checker 130 of FIG. 1 may determine features 812 based on theenrollment acoustic data 508, the enrollment vibration data 510, thetesting acoustic data 512, the testing vibration data 530, or acombination thereof. To illustrate, the liveness checker 130 maydetermine enrollment acoustic features based on the enrollment acousticdata 508, enrollment vibration features based on the enrollmentvibration data 510, testing acoustic features based on the testingacoustic data 512, testing vibration features based on the testingvibration data 530, or a combination thereof. The features 812 mayinclude the enrollment acoustic features, the enrollment vibrationfeatures, the testing acoustic features, the testing vibration features,or a combination thereof.

The method 800 also includes classification, at 804. For example, theliveness checker 130 may generate a score 816 based on the features 812and an anti-spoofing model 814. To illustrate, the enroller 220 mayupdate (or generate) the anti-spoofing model 814 based on the enrollmentacoustic features, the enrollment vibration features, or both. Theliveness checker 130 may determine the correlation score 134, asdescribed with reference to FIG. 1, based on the testing acousticfeatures, the testing vibration features, or both. The correlation score134 may indicate a vibration measure, an acoustic-vibration correlationscore, a vibration-vibration correlation score, or a combinationthereof, as described with reference to FIG. 1. The liveness checker 130may determine the threshold 136 based on the testing acoustic featuresand the anti-spoofing model 814. The liveness checker 130 may determinethe score 816 based on the correlation score 134 and the threshold 136(e.g., the score 816=|the correlation score 134−the threshold 136|).

The method 800 further includes making a decision, at 806. For example,the liveness checker 130 may, in response to determining that the score816 satisfies (e.g., is less than or equal to) the threshold, generatethe non-spoof value 624. The method 800 may proceed to 610. As anotherexample, the liveness checker 130 may, in response to determining thatthe score 816 fails to satisfy (e.g., is greater than) the threshold,generate the spoof value 625. The method 800 may proceed to 612.

In a particular implementation, the score 816 may correspond to acorrelation score (e.g., the correlation score 134) indicating acorrelation between the testing acoustic features, the testing vibrationfeatures, or both, and features (e.g., the enrollment acoustic features,the enrollment vibration features, or both) of the anti-spoofing model814. In this implementation, the liveness checker 130 may generate thenon-spoof value 624 in response to determining that the correlationscore (e.g., the correlation score 134) satisfies (e.g., is greater thanor equal to) a threshold (e.g., the threshold 136). Alternatively, theliveness checker 130 may, in response to determining that thecorrelation score (e.g., the correlation score 134) fails to satisfy(e.g., is less than) the threshold (e.g., the threshold 136), generatethe spoof value 625.

The method 800 thus enables passive liveness testing that may beperformed in the background during use of the device 102. The livenesschecker 130 may perform model-based anti-spoofing using acoustic data,vibration data, or both.

Referring to FIG. 9, a diagram is shown and generally designated 900.The diagram 900 illustrates a method 910 and a method 920. The method910, the method 920, or both, may be performed by at least one of theliveness checker 130, the authenticator 120, the device 102, the system100 of FIG. 1, the enroller 220, the system 200 of FIG. 2, the acousticdistortion measurer 340, or the system 300 of FIG. 3. The method 910 maybe performed during an enrollment stage. The method 920 may be performedduring a testing (e.g., verification) stage.

The method 910 includes estimating mouth DOA over time via multiplemicrophones (mic) during utterance, at 902. For example, the livenesschecker 130 may generate enrollment DOA data (e.g., the DOA data 344)based on the first acoustic signal 328 received via the first microphone108 and the second acoustic signal 330 received via the secondmicrophone 312, as described with reference to FIG. 3. The firstacoustic signal 328, the second acoustic signal 330, or both, may bereceived while the user 310 (e.g., the user 210 of FIG. 2) is speaking.

The method 910 also includes analyzing DOA oscillation pattern overrecording time, at 904. For example, the liveness checker 130 maygenerate enrollment variations in DOA (e.g., the variations in DOA 346of FIG. 3) based on the enrollment DOA data (e.g., the DOA data 344), asdescribed with reference to FIG. 3. The enrollment variations in DOA(e.g., the variations in DOA 346) may correspond to vibration featuresas a range of DOA oscillation, a frequency of DOA oscillation, or both.

The method 910 further includes combining spectral and/or vibrationfeatures and training a liveness classifier with humans and variousloudspeaker setups, at 906. For example, the liveness checker 130 maygenerate (or update) an anti-spoofing model (e.g., a classifier) basedon the enrollment variations in DOA (e.g., the variations in DOA 346)and enrollment acoustic features of the first acoustic signal 328, thesecond acoustic signal 330, or both. To illustrate, the anti-spoofingmodel (e.g., the anti-spoofing model 814) may indicate a correlationbetween the enrollment variations in DOA (e.g., the variations in DOA346) and the enrollment acoustic features.

The method 920 includes estimating mouth DOA over time via multiplemicrophones (mic) during utterance, at 912. For example, the livenesschecker 130 may generate testing DOA data (e.g., the DOA data 344) basedon the first acoustic signal 328 received via the first microphone 108and the second acoustic signal 330 received via the second microphone312, as described with reference to FIG. 3. The first acoustic signal328, the second acoustic signal 330, or both, may be received while theuser 310 (e.g., the user 110 of FIG. 1) is speaking.

The method 920 also includes analyzing DOA oscillation pattern overrecording time, at 914. For example, the liveness checker 130 maygenerate testing variations in DOA (e.g., the variations in DOA 346 ofFIG. 3) based on the testing DOA data (e.g., the DOA data 344), asdescribed with reference to FIG. 3. The testing variations in DOA (e.g.,the variations in DOA 346) may correspond to vibration features as arange of DOA oscillation, a frequency of DOA oscillation, or both.

The method 920 includes determining liveness based on a classifier scoreusing spectral and/or vibration features, at 916. For example, theliveness checker 130 may generate a classifier score (e.g., thecorrelation score 134 of FIG. 1 or the score 816 of FIG. 8) based on thetesting acoustic features, the testing variations in DOA, theanti-spoofing model (e.g., a classifier), or a combination thereof. Theliveness checker 130 may determine liveness based on a comparison of theclassifier score (e.g., the correlation score 134 or the score 816) anda threshold. For example, the liveness checker 130 may determine thatthe first acoustic signal 328 (e.g., the first acoustic signal 128 ofFIG. 1) corresponds to a live user in response to determining that theclassifier score (e.g., the correlation score 134 or the score 816)satisfies the threshold.

The methods 910 and 920 thus enable passive liveness determinationduring use of the device 102 of FIG. 1. The liveness determination maybe based on DOA of acoustic signals.

Referring to FIG. 10, a method is shown and generally designated 1000.The method 1000 may be performed by at least one of the liveness checker130, the authenticator 120, the device 102, the system 100 of FIG. 1,the enroller 220, the system 200 of FIG. 2, the acoustic distortionmeasurer 340, the system 300 of FIG. 3, the synthetic signal generator440, or the system 400 of FIG. 4.

The method 1000 includes generating a synthesized keyword with prosodyfeatures, at 1002. For example, the synthetic signal generator 440 ofFIG. 4 may generate the synthetic speech signal 424 corresponding to thefirst words 444 (e.g., a keyword). The first words 444 may include thefirst prosody features 442. The liveness checker 130 may provide thesynthetic speech signal 424 to the speakers 404.

The method 1000 also includes receiving an acoustic signal, at 1004. Theacoustic signal may correspond to a user listening to the syntheticspeech signal 424 and attempting to repeat the first words 444. Forexample, the liveness checker 130 may receive the first acoustic signal428, as described with reference to FIG. 4. The first acoustic signal428 may correspond to the user 310 listening to an output (e.g., thesynthetic speech signal 424) of the speakers 404 and attempting torepeat the first words 444.

The method 1000 further includes sentence verification, at 1006. Forexample, the liveness checker 130 of FIG. 1 may determine that the firstacoustic signal 428 corresponds to the second words 446, as describedwith reference to FIG. 4. The liveness checker 130 may determine whetherthe second words 446 match the first words 444. For example, theliveness checker 130 may determine that the second words 446 match thefirst words 444 in response to determining that the second words 446include at least a threshold number of the first words 444 or of wordsthat sound similar to the first words 444.

The method 1000 also includes prosody detection, at 1008. For example,the liveness checker 130 may, in response to determining that the secondwords 446 match the first words 444, at 1006, determine that the firstacoustic signal 428 includes the second prosody features 434 (e.g.,loudness, duration, pause, pitch, or a combination thereof). Theliveness checker 130 may determine whether the second prosody features434 match the first prosody features 442. For example, the livenesschecker 130 may determine that the second prosody features 434 match thefirst prosody features 442 in response to determining that the secondprosody features 434 include at least a threshold number of the firstprosody features 442.

The method 1000 further includes prosody normalization, at 1010. Forexample, the liveness checker 130 may perform prosody normalization onthe first acoustic signal 428. To illustrate, the liveness checker 130may generate the first acoustic signal 128 (or the first acoustic signal228) by performing the prosody normalization on the first acousticsignal 428. The method 1000 may proceed to 604. In an alternateimplementation, the method 1000 may proceed to 606. The method 1000 thusenables determining liveness of a user (e.g., the user 310) based onprosody features that may difficult to spoof in real-time.

Referring to FIG. 11, a method is shown and generally designated 1100.The method 1100 may be performed by at least one of the liveness checker130, the authenticator 120, the device 102, the system 100 of FIG. 1,the enroller 220, the system 200 of FIG. 2, the acoustic distortionmeasurer 340, the system 300 of FIG. 3, the synthetic signal generator440, or the system 400 of FIG. 4. The method 1100 includes, in responseto generating the non-spoof value 622, at 606, performing anti-spoofing,at 1108.

The method 1100 includes liveness detection, at 1102. For example, theliveness checker 130 of FIG. 1 may, during a particular security mode(e.g., a high security mode), prompt the user 110 to provide sameinformation again. To illustrate, the enrollment data 118 may include afirst enrolled keyword. The authentication data 122 may include thefirst keyword. For example, the authenticator 120 may determine thefirst keyword by performing language recognition on the testing acousticdata 512 (e.g., the first acoustic signal 128). The authenticator 120may determine that the user 110 is authenticated, as described withreference to 604 of FIG. 6, in response to determining that the firstkeyword matches (e.g., is substantially similar to) the first enrolledkeyword.

The liveness checker 130 may, in response to generating the non-spoofvalue 622, at 606, prompt the user 110 to provide the first enrolledkeyword again. The liveness checker 130 may receive a particularacoustic signal subsequent to prompting the user 110. The livenesschecker 130 may generate a first particular keyword by performinglanguage recognition on the acoustic signal. The liveness checker 130may perform a liveness determination based on a comparison of the firstacoustic signal 128 and the particular acoustic signal. For example, theliveness checker 130 may, in response to determining that the firstparticular keyword matches the first keyword, generate a similarityscore indicating a level of similarity between the first acoustic signal128 and the particular acoustic signal. A similarity score thatsatisfies (e.g., is greater than) a similarity threshold may indicatereplay spoofing. For example, during replay spoofing, the particularacoustic signal may be more similar (e.g., identical) to the firstacoustic signal 128 than if the particular acoustic signal is generatedby a live user. The liveness checker 130 may generate a spoof value 1125in response to determining that the similarity score satisfies (e.g., isgreater than) the similarity threshold. The method 1100 may proceed to612. As another example, the liveness checker 130 may, in response todetermining that the similarity score fails to satisfy (e.g., is lessthan or equal to) the similarity threshold, generate a non-spoof value1122.

The method 1100 also includes speaker ID verification, at 1104. Forexample, the enrollment data 118 may include multiple keywords (e.g.,the first enrolled keyword and a second enrolled keyword). The livenesschecker 130 may prompt the user 110 to provide the second enrolledkeyword. The liveness checker 130 may receive a second testing acousticsignal subsequent to prompting the user 110. The liveness checker 130may generate a second keyword by performing language recognition on thesecond testing acoustic signal. The liveness checker 130 may perform aliveness determination based on a comparison of the second keyword andthe second enrolled keyword. For example, the liveness checker 130 maygenerate a reject value 1121 in response to determining that the secondkeyword does not match the second enrolled keyword. The method 1100 mayproceed to 612. As another example, the liveness checker 130 may, inresponse to determining that the second keyword matches (e.g., issubstantially similar to) the second enrolled keyword, generate anaccept value 1120.

The method 1100 further includes performing anti-spoofing based onacoustics, at 1106. For example, the liveness checker 130 may performacoustics-based anti-spoofing, as described with reference to 606 ofFIG. 6, using the second testing acoustic signal. To illustrate, theliveness checker 130 may perform one or more determinations, asdescribed with reference to 606 of FIG. 6. The liveness checker 130 maygenerate a spoof value 1123 in response to determining that at least oneof the one or more determinations is unsuccessful. The method 1100 mayproceed to 612. Alternatively, the liveness checker 130 may, in responseto determining that all of the one or more determinations aresuccessful, generate a non-spoof value 1124. The method 1100 may proceedto 610. In an alternative implementation, the method 100 may, inresponse to determining that all of the one or more determinations aresuccessful, at 1106, proceed to 608.

The method 1100 thus enables high security level anti-spoofingprotection. During a high security mode, the liveness checker 130 maydetect replay spoofing by prompting for a user to provide the samekeyword again. In addition, or in the alternative, the liveness checker130 may prompt a user to provide a randomly selected enrollment keyword.Recordings of multiple enrollment keywords may be less likely to becompromised than a recording of a single enrollment keyword.

Referring to FIG. 12, a method is shown and generally designated 1200.The method 1200 may be performed by at least one of the device 102, thesystem 100 of FIG. 1, the enroller 220, or the system 200 of FIG. 2.

The method 1200 includes performing enrollment, at 502. For example, theenroller 220 may generate a speech model 1212, an anti-spoofing model1214, or both, based on the enrollment acoustic data 508, enrollmentsensor data 1210, or both. The enrollment sensor data 1210 may includethe enrollment vibration data 510, location data, touch data, gesturedata, or a combination thereof. The location data may indicate alocation (e.g., coordinates, geographical location, city, state,address, building, point of interest, or a combination thereof) of thedevice 102 at a first time at which the first acoustic signal 228 ofFIG. 2 is received. Touch data may include data (e.g., an optical imageor sound data) corresponding to at least a portion of a finger print ora hand print. The gesture data may indicate one or more gestures of theuser 210 at approximately the first time. For example, the device 102may receive image data via a camera and may determine the gesture databy performing gesture recognition on the image data. The touch data, thegesture data, or both, may be generated concurrently with receiving thefirst acoustic signal 228.

The anti-spoofing model 1214 may include the acoustic model 714, theanti-spoofing model 814, or both. The enroller 220 may, during anenrollment stage, extract acoustic features from the enrollment acousticdata 508. The enroller 220 may update (or generate) the speech model1212 based on the acoustic features. The enroller 220 may extractvibration features from the enrollment vibration data 510, locationfeatures from the location data, touch features from the touch data,gesture features from the gesture data, or a combination thereof. Theenroller 220 may update (or generate) the anti-spoofing model 1214 basedon the acoustic features, the vibration features, the location features,the touch features, the gesture features, or a combination thereof.

The liveness checker 130 of FIG. 1 may, during a testing stage, receivethe testing acoustic data 512, testing sensor data (e.g., the testingvibration data 530, testing location data, testing touch data, testinggesture data, or a combination thereof), or a combination thereof. Theliveness checker 130 may extract testing features from the testingacoustic data 512, the testing sensor data, or both. For example, theliveness checker 130 may determine testing acoustic features of testingacoustic data 512, testing vibration features of the testing vibrationdata 530, testing location features of the testing location data,testing touch features of the testing touch data, testing gesturesfeatures of the testing gesture data, or a combination thereof. Theliveness checker 130 may determine an acoustic classification score(e.g., the score 716 of FIG. 7) based on the testing acoustic featuresand the speech model 1212. The liveness checker 130 may determine ananti-spoofing classification score (e.g., the score 816 of FIG. 8) basedon the anti-spoofing model 1214 and the testing features (e.g., thetesting acoustic features, the testing vibration features, the testinglocation features, the testing touch features, the testing gesturesfeatures, or a combination thereof).

The method 1200 may thus enable passive liveness determination to beperformed based on an anti-spoofing model. The anti-spoofing model maybe generated (or updated) during an enrollment stage and may be used toperform anti-spoofing during a testing stage.

Referring to FIG. 13, a diagram is shown and generally designated 1300.The diagram 1300 includes a graphical user interface (GUI) 1302, a GUI1304, and a GUI 1306. One or more of the GUIs 1302-1306 may be generatedby one or more of the systems of FIGS. 1-4.

The liveness checker 130 may provide the GUI 1302 to a display of thedevice 102 in response to receiving a user input indicating anauthorization request. The enrollment data 118 may include one or moreenrollment keywords. The GUI 1302 may prompt the user 110 of FIG. 1 tosay at least one of the one or more enrollment keywords. The livenesschecker 130 may, subsequent to providing the GUI 1302 to the display,receive the first acoustic signal 128 of FIG. 1. The liveness checker130 may generate the testing acoustic data 512 based on the firstacoustic signal 128.

The liveness checker 130 may, subsequent to receiving the first acousticsignal 128, provide the GUI 1304 to the display. For example, theliveness checker 130 may generate a first particular keyword byperforming language recognition on the first acoustic signal 128. In aparticular aspect, the liveness checker 130 may generate the GUI 1304 inresponse to determining that the first particular keyword does not matchany of the one or more enrollment keywords.

In a particular aspect, the liveness checker 130 may generate the GUI1304 in response to determining that the testing acoustic data 512 doesnot correspond to a live user. For example, the liveness checker 130may, in response to determining that the first particular keywordmatches at least one of the one or more enrollment keywords, determinethe correlation score 134 based on the testing acoustic data 512, thetesting vibration data 530, or both, as described with reference to FIG.5. The liveness checker 130 may generate the GUI 1304 in response todetermining that the correlation score 134 fails to satisfy thethreshold 136.

The GUI 1304 may prompt the user 110 to provide additional information.For example, the device 102 may store user data, such as call data,location data, appointment data, or a combination thereof. Call data mayindicate one or more outgoing call times at which calls are made tocontacts from the device 102, one or more incoming call times at whichcalls are received by the device 102, or both. Location data mayindicate times at which the device 102 was at various locations.Appointment data may indicate appointments stored in a calendar of thedevice 102. The appointments may include at least one of a pastappointment, a present appointment, or a future appointment. The GUI1304 may include a question (e.g., a time at which a call was made to aparticular contact, a time at which the device 102 was at a location, aparticular location of the device 102 at a particular time, anappointment time of a particular appointment, an appointment location ofthe particular appointment, or a combination thereof).

The liveness checker 130 may, subsequent to providing the GUI 1304 tothe display, receive acoustic data 1312 (e.g., an acoustic signal). Theliveness checker 130 may generate authentication user data by performinglanguage recognition on the acoustic data 1312. The liveness checker 130may provide the GUI 1306 to the display in response to determining thatthe authentication user data corresponds to a valid answer (e.g.,matches the user data). For example, the liveness checker 130 maydetermine that the testing acoustic data 512, the acoustic data 1312, orboth, correspond to a live user in response to determining that theauthentication user data corresponds to a valid answer (e.g., matchesthe user data). The liveness checker 130 may determine that the acousticdata 1312 (e.g., an acoustic signal) corresponds to a valid answer inresponse to determining that the authentication user data corresponds toa valid answer (e.g., matches the user data). The liveness checker 130may, in response to determining that the acoustic data 1312 (e.g., anacoustic signal) corresponds to a valid answer, determine that the user110 is authorized. The GUI 1306 may indicate that the user 110 isauthorized.

The method 1300 may thus enable liveness determination based on userdata as backup for sensor-based liveness determination. For example, theuser may be prompted to provide additional information that is likely tobe known to an authorized user when authorization based on acousticdata, vibration data, or both, is unsuccessful. The livenessdetermination may be performed based on the additional information.

Referring to FIG. 14, a method is shown and generally designated 1400.The method 1400 may be performed by at least one of the liveness checker130, the authenticator 120, the device 102, or the system 100 of FIG. 1.

The method 1400 includes authenticating, at a device, a user based onauthentication data, at 1402. For example, the authenticator 120 of thedevice 102 may authenticate the user 110 based on the authenticationdata 122, as described with reference to FIG. 1.

The method 1400 also includes, in response to determining that the useris authenticated, generating a correlation score indicating acorrelation between a first signal received from a first sensor and asecond signal received from a second sensor, at 1404. For example, theliveness checker 130 of FIG. 1 may, in response to determining that theuser 110 is authenticated, generate the correlation score 134 indicatinga correlation between at least two of the first acoustic signal 128received from the first microphone 108, the first vibration signal 124received from the first vibration sensor 104, or the second vibrationsignal 126 received from the second vibration sensor 106, as describedwith reference to FIG. 1.

The method 1400 further includes determining, at the device, liveness ofthe user based on a comparison of the correlation score and a threshold,at 1406. For example, the liveness checker 130 of the device 102 of FIG.1 may determine liveness of the user 110 based on the correlation score134 and threshold 136, as described with reference to FIG. 1.

The method 1400 thus enables passive liveness determination during useof the device 102. In cases where the liveness checker 130 determinesthat the first acoustic signal 128 corresponds to a live user based onthe comparison of the correlation score 134 and the threshold 136, theuser 110 may be unaware that the device 102 has performed a livenessdetermination.

Referring to FIG. 15, a block diagram of a device (e.g., a wirelesscommunication device) is depicted and generally designated 1500. Invarious implementations, the device 1500 may have fewer or morecomponents than illustrated in FIG. 15. In an illustrativeimplementation, the device 1500 may correspond to the device 102 ofFIGS. 1-4. In an illustrative aspect, the device 1500 may operateaccording to one or more methods or systems described with reference toFIGS. 1-14.

In a particular aspect, the device 1500 includes one or more processors1510 (e.g., a central processing unit (CPU), one or more digital signalprocessors (DSPs), or a combination thereof). The processors 1510 mayinclude the authenticator 120, the liveness checker 130, the enroller220, the acoustic distortion measurer 340, the synthetic signalgenerator 440, or a combination thereof.

The device 1500 may include a memory 132 and a CODEC 1534. The device1500 may include a wireless interface 1540 coupled to an antenna 1542.The device 1500 may include the display 1528 coupled to a displaycontroller 1526. The speakers 404, one or more microphones 1546, or bothmay be coupled to the CODEC 1534. The microphones 1546 may include thefirst microphone 108 of FIG. 1, the second microphone 312 of FIG. 3, ora combination thereof.

The memory 132 may include instructions 1568 executable by theprocessors 1510, the CODEC 1534, one or more other processing units ofthe device 1500, or a combination thereof, to perform methods andprocesses disclosed herein, such as the method 500 of FIG. 5, the method600 of FIG. 6, the method 700 of FIG. 7, the method 800 of FIG. 8, themethod 910, the method 920 of FIG. 9, the method 1000 of FIG. 10, themethod 1100 of FIG. 11, the method 1200 of FIG. 12, the method 1400 ofFIG. 14, or a combination thereof. The memory 132 may include theanalysis data 190.

One or more components of the systems 100, 200, 300, and/or 400 may beimplemented via dedicated hardware (e.g., circuitry), by a processorexecuting instructions to perform one or more tasks, or a combinationthereof. As an example, the memory 132 may be a memory device, such as arandom access memory (RAM), magnetoresistive random access memory(MRAM), spin-torque transfer MRAM (STT-MRAM), flash memory, read-onlymemory (ROM), programmable read-only memory (PROM), erasableprogrammable read-only memory (EPROM), electrically erasableprogrammable read-only memory (EEPROM), registers, hard disk, aremovable disk, or a compact disc read-only memory (CD-ROM). The memorydevice may include instructions (e.g., the instructions 1568) that, whenexecuted by a computer (e.g., a processor in the CODEC 1534 and/or theprocessors 1510), may cause the computer to perform at least a portionof one of the methods described herein. As an example, the memory 132may be a non-transitory computer-readable medium that includesinstructions (e.g., the instructions 1568) that, when executed by acomputer (e.g., a processor in the CODEC 1534 and/or the processors1510), cause the computer perform at least a portion of the methodsdescribed herein.

In a particular aspect, the device 1500 may be included in asystem-in-package or system-on-chip device (e.g., a mobile station modem(MSM)) 1522. In a particular aspect, the processors 1510, the displaycontroller 1526, the memory 132, the CODEC 1534, and the wirelessinterface 1540 are included in a system-in-package or the system-on-chipdevice 1522. In a particular aspect, an input device 1536, such as atouchscreen and/or keypad, one or more vibration sensors 1524, and apower supply 1544 are coupled to the system-on-chip device 1522.Moreover, in a particular aspect, as illustrated in FIG. 15, the display1528, the input device 1536, the speakers 404, the one or moremicrophones 1546, the one or more vibration sensors 1524, the antenna1542, and the power supply 1544 are external to the system-on-chipdevice 1522. However, each of the display 1528, the input device 1536,the speakers 404, the one or more microphones 1546, the one or morevibration sensors 1524, the antenna 1542, and the power supply 1544 canbe coupled to a component of the system-on-chip device 1522, such as aninterface or a controller. The one or more vibration sensors 1524 mayinclude the first vibration sensor 104, the second vibration sensor 106,or both.

The device 1500 may include a mobile phone, a communication device, acomputer, a music player, a video player, an entertainment unit, anavigation device, a personal digital assistant (PDA), a decoder, a settop box, or any combination thereof.

In an illustrative aspect, the processors 1510 may be operable toperform all or a portion of the methods or operations described withreference to FIGS. 1-14. For example, the processors 1510 may receive(or access) the first acoustic signal 128 of FIG. 1 from the firstmicrophone 108, the first vibration signal 124 from the first vibrationsensor 104, the second vibration signal 126 from the second vibrationsensor 106, or a combination thereof, as described with reference toFIG. 1. The processors 1510 may authenticate the user 110 of FIG. 1based on the authentication data 122, as described with reference toFIG. 1. The processors 1510 may, in response to determining that theuser 110 is authenticated, determine liveness of the user 110 based on acomparison of the correlation score 134 and the threshold 136, asdescribed with reference to FIG. 1.

In conjunction with the described aspects, an apparatus is disclosedthat includes means for authenticating a user based on authenticationdata. For example, the means for authenticating may include theauthenticator 120, the processors 1510, one or more circuits or devicesconfigured to authenticate a user based on authentication data (e.g., aprocessor executing instructions at a non-transitory computer readablestorage medium), or a combination thereof.

The apparatus also includes means for determining liveness of the userbased on a correlation score in response to determining that the user isauthenticated. For example, the means for determining liveness mayinclude the liveness checker 130, the processors 1510, one or morecircuits or devices configured to authenticate a user based onauthentication data (e.g., a processor executing instructions at anon-transitory computer readable storage medium), or a combinationthereof. The correlation score (e.g., the correlation score 134 ofFIG. 1) may indicate a correlation between a first signal (e.g., thefirst acoustic signal 128 of FIG. 1) received from a first sensor (e.g.,the first microphone 108 of FIG. 1) and a second signal (e.g., the firstvibration signal 124 of FIG. 1) received from a second sensor (e.g., thefirst vibration sensor 104 of FIG. 1).

Those of skill would further appreciate that the various illustrativelogical blocks, configurations, modules, circuits, and algorithm stepsdescribed in connection with the aspects disclosed herein may beimplemented as electronic hardware, computer software executed by aprocessor, or combinations of both. Various illustrative components,blocks, configurations, modules, circuits, and steps have been describedabove generally in terms of their functionality. Whether suchfunctionality is implemented as hardware or processor executableinstructions depends upon the particular application and designconstraints imposed on the overall system. Skilled artisans mayimplement the described functionality in varying ways for eachparticular application, such implementation decisions are not to beinterpreted as causing a departure from the scope of the presentdisclosure.

The steps of a method or algorithm described in connection with theaspects disclosed herein may be embodied directly in hardware, in asoftware module executed by a processor, or in a combination of the two.A software module may reside in random access memory (RAM), flashmemory, read-only memory (ROM), programmable read-only memory (PROM),erasable programmable read-only memory (EPROM), electrically erasableprogrammable read-only memory (EEPROM), registers, hard disk, aremovable disk, a compact disc read-only memory (CD-ROM), or any otherform of non-transient storage medium known in the art. An exemplarystorage medium is coupled to the processor such that the processor mayread information from, and write information to, the storage medium. Inthe alternative, the storage medium may be integral to the processor.The processor and the storage medium may reside in anapplication-specific integrated circuit (ASIC). The ASIC may reside in acomputing device or a user terminal. In the alternative, the processorand the storage medium may reside as discrete components in a computingdevice or user terminal.

The previous description of the disclosed aspects is provided to enablea person skilled in the art to make or use the disclosed aspects.Various modifications to these aspects will be readily apparent to thoseskilled in the art, and the principles defined herein may be applied toother aspects without departing from the scope of the disclosure. Thus,the present disclosure is not intended to be limited to the aspectsshown herein but is to be accorded the widest scope possible consistentwith the principles and novel features as defined by the followingclaims.

What is claimed is:
 1. A device comprising: a memory configured to storea threshold; and a processor configured to: authenticate a user based onauthentication data; in response to determining that the user isauthenticated, generate a correlation score indicating a correlationbetween a first signal received from a first sensor and a second signalreceived from a second sensor; and determine liveness of the user basedon a comparison of the correlation score and the threshold.
 2. Thedevice of claim 1, wherein the authentication data includes non-acousticdata.
 3. The device of claim 1, wherein the authentication data includesat least one of an alphanumeric password, a finger print, an iris scan,or a facial image.
 4. The device of claim 1, wherein the processor isconfigured to determine that the user is authenticated in response todetermining that the authentication data matches enrollment data.
 5. Thedevice of claim 1, wherein the first sensor includes a first vibrationsensor and the second sensor includes a second vibration sensor, andwherein the threshold is indicative of a threshold correlation between afirst vibration signal generated by the first vibration sensor and asecond vibration signal generated by the second vibration sensor whensounds corresponding to an acoustic signal are generated by the user. 6.The device of claim 1, wherein the processor is further configured to:generate direction of arrival data based on acoustic signals receivedfrom a plurality of microphones; and determine variations in directionof arrival indicated by the direction of arrival data, wherein theprocessor is further configured to generate the correlation score inresponse to determining that the variations satisfy a variationthreshold.
 7. The device of claim 6, wherein the direction of arrivaldata indicates a first direction of arrival at a first time and a seconddirection of arrival at a second time, and wherein the variationsinclude a difference between the first direction of arrival and thesecond direction of arrival.
 8. The device of claim 6, wherein theprocessor is further configured to: generate a direction of arrivalcorrelation score indicating a particular correlation between thedirection of arrival and the first signal, wherein the first sensorincludes a microphone of the plurality of microphones, and wherein theliveness of the user is based on a comparison of the direction ofarrival correlation score and a direction of arrival threshold.
 9. Thedevice of claim 1, wherein the processor is further configured togenerate acoustic distortion data based on the first signal, wherein thefirst sensor includes a microphone, and wherein the processor is furtherconfigured to generate the correlation score in response to determiningthat the acoustic distortion data satisfies an acoustic distortionthreshold.
 10. The device of claim 9, wherein the acoustic distortiondata includes a classification score, and wherein the processor isfurther configured to: extract acoustic features from the first signal;and determine the classification score based on the acoustic featuresand an acoustic model.
 11. The device of claim 1, wherein the firstsignal includes a first vibration signal received from a first vibrationsensor or a first acoustic signal received from a first microphone, andwherein the second signal includes a second vibration signal receivedfrom a second vibration sensor.
 12. The device of claim 1, wherein theprocessor is further configured to: generate an enrollment correlationscore indicating a particular correlation between a first particularsignal received from the first sensor and a second particular signalreceived from the second sensor, and store enrollment data in the memoryin response to determining that the enrollment correlation scoresatisfies an enrollment threshold, and wherein the user is authenticatedbased on a comparison of the authentication data and the enrollmentdata.
 13. The device of claim 12, wherein the processor is furtherconfigured to determine the threshold based on the enrollmentcorrelation score.
 14. The device of claim 12, wherein the processor isfurther configured to store a sum of the enrollment correlation scoreand a tolerance value in the memory as the threshold.
 15. A method ofauthentication comprising: determining, at a device, that a user isauthenticated based on authentication data; in response to determiningthat the user is authenticated, generating a correlation scoreindicating a correlation between a first signal received from a firstsensor and a second signal received from a second sensor; anddetermining, at the device, liveness of the user based on a comparisonof the correlation score and a threshold.
 16. The method of claim 15,wherein the first sensor includes a first vibration sensor and thesecond sensor includes a second vibration sensor, and wherein thethreshold is indicative of a threshold correlation between firstvibrations that propagate through a body of the user and secondvibrations that propagate through the body of the user when soundscorresponding to an acoustic signal are generated by the user.
 17. Themethod of claim 15, further comprising: generating, at the device,direction of arrival data based on acoustic signals received from aplurality of microphones; and determining, at the device, variations indirection of arrival indicated by the direction of arrival data, whereinthe correlation score is generated in response to determining that thevariations satisfy a variation threshold.
 18. The method of claim 17,wherein the variation threshold is indicative of a threshold variationwhen sounds corresponding to the acoustic signals are received from alive user.
 19. The method of claim 17, further comprising: generating,at the device, a direction of arrival correlation score indicating aparticular correlation between the direction of arrival and the firstsignal, wherein the first sensor includes a microphone of the pluralityof microphones, wherein the liveness of the user is based on acomparison of the direction of arrival correlation score and a directionof arrival threshold.
 20. The method of claim 19, wherein the directionof arrival threshold is indicative of a threshold correlation betweenthe direction of arrival and the first signal when sounds correspondingto the first signal are generated by a live user.
 21. Acomputer-readable storage device storing instructions that, whenexecuted by a processor, cause the processor to perform operationscomprising: authenticating a user based on authentication data; inresponse to determining that the user is authenticated, generating acorrelation score indicating a correlation between a first signalreceived from a first sensor and a second signal received from a secondsensor; and determining liveness of the user based on a comparison ofthe correlation score and a threshold.
 22. The computer-readable storagedevice of claim 21, wherein the operations further comprise extractingfeatures based on the first signal and the second signal, wherein thecorrelation score is based on the features, and wherein the threshold isbased on an anti-spoofing model.
 23. The computer-readable storagedevice of claim 22, wherein the operations further comprise extractingenrollment features based on a first particular signal received from thefirst sensor and a second particular signal received from the secondsensor, and wherein the anti-spoofing model is based on the enrollmentfeatures.
 24. The computer-readable storage device of claim 21, whereinthe operations further comprise: generating a synthetic speech signalcorresponding to one or more first words, the synthetic speech signalincluding one or more first prosody features; providing the syntheticspeech signal to a speaker; receiving an acoustic signal via amicrophone; performing speech recognition to determine that the acousticsignal corresponds to one or more second words; determining that the oneor more second words are similar to the one or more first words; anddetermining that the acoustic signal corresponds to one or more secondprosody features, wherein the correlation score is generated in responseto determining that the one or more second prosody features are similarto the one or more first prosody features.
 25. The computer-readablestorage device of claim 24, wherein the one or more prosody featuresinclude at least one of loudness, duration, pause, or pitch.
 26. Thecomputer-readable storage device of claim 21, wherein the first sensorincludes a microphone, wherein the first signal includes a firstacoustic signal, wherein the operations further comprise receiving asecond acoustic signal via the microphone, and wherein the correlationscore is generated in response to determining that a difference betweenthe first acoustic signal and the second acoustic signal satisfies adifference threshold.
 27. The computer-readable storage device of claim21, wherein the operations further comprise: in response to determiningthat correlation score does not correspond to a live user, generating agraphical user interface that includes a question; providing thegraphical user interface to a display; receiving an acoustic signal viaa microphone; and in response to determining that the acoustic signalcorresponds to a valid answer of the question, determining that the useris authorized.
 28. The computer-readable storage device of claim 21,wherein the operations further comprise: generating direction of arrivaldata based on acoustic signals received from a plurality of microphones;and determining variations in direction of arrival indicated by thedirection of arrival data, wherein the correlation score is generated inresponse to determining that the variations satisfy a variationthreshold.
 29. An apparatus comprising: means for authenticating a userbased on authentication data; and means for determining liveness of theuser based on a correlation score in response to determining that theuser is authenticated, the correlation score indicating a correlationbetween a first signal received from a first sensor and a second signalreceived from a second sensor.
 30. The apparatus of claim 29, whereinthe means for authenticating and the means for determining areintegrated into at least one of a mobile phone, a communication device,a computer, a music player, a video player, an entertainment unit, anavigation device, a personal digital assistant (PDA), a decoder, or aset top box.